Senkai white paper

Part A: Senkai today

The app

Senkai is an Android app published by Senkai Network Private Limited, a company incorporated in Pakistan. It is offered as a signed file from senkainetwork.com, the only place it comes from, with the file's checksum and the signing certificate's fingerprint published beside it so that anyone can check what they downloaded. There is no Play Store listing and no iPhone version. The sign-up says: You must be 16 or over.

The hour

You watch one advertisement, shown by Google AdMob. Google confirms to the Senkai server that the advertisement was watched to the end; a message from the app alone is never enough. That opens one hour, timed by the server. While the hour runs, no amount exists anywhere. When it closes, that hour's fixed pool of points is divided among everyone who took part, by the rule on the mechanism page, and your share is shown in the app about an hour after you tapped. Another hour needs another advertisement, by your choice. Nothing renews automatically.

The points

What the app counts are Senkai points. The app says this under your balance, in its own words: In-app points only. They have no cash value. Today they are not a token, not a coin and not money, and cannot be bought, sold, exchanged, withdrawn or transferred. They will become Senkai tokens when the mainnet launches, and are intended to have value then; no date, no price and no amount is promised, and a token can lose all its value.

The app counts in points, the smallest unit. Part B and the mechanism page count in units of nine decimal places, as the design's code does, so one unit in those pages is 1,000,000,000 points. Today's points for an hour come from the same division rule and the same schedule Part B describes, applied by the server under a trial policy to this in-app asset.

What the app collects

At sign-up: an email address, a password (kept by the server in a form that cannot be read back), a display name, a date of birth and a country. From the phone: a hardware attestation, the phone's secure hardware proving to the server that it is a real Android phone, without which the server refuses sign-in. Through Google AdMob: the advertisement events; the app does not send Google your email address or your account identifier. Not collected: any wallet address, phone number, contacts, location or files.

To delete an account, write to [email protected] from the email address you signed up with. A privacy policy and terms of service are pending.

How to check the file

The file's name, version, build date, SHA-256 checksum and signing certificate fingerprint are published on the download section of the home page, with plain instructions for checking each on a computer or a phone. If a value differs from what is published, do not install the file.

Everything from here on is Part B: the design. It describes intended behaviour that remains subject to review, audit, legal clearance and change, and none of it is live.

1. What the design does

Users voluntarily watch a rewarded ad to activate one server-authoritative one-hour session. Rewards are variable, verified and capped. No device computation occurs, and value is not guaranteed.

In the design, the advertiser pays for attention that was genuinely given. Part of that revenue supports the operation of the service, and participants receive a share of a fixed reward reserve that is released on a published schedule. The reserve does not grow with the number of participants, with revenue, or with anything else. It is fixed at the start and exhausted after fifteen years.

What runs today is the hour and the division; the reserve, the token and everything on a blockchain are design only.

2. Design principles

The server decides, the phone displays

Time, eligibility, weight, the hour a session belongs to, the amount and (in the design) the authority to claim are all determined on the server. The app performs no calculation whose result anyone relies on. A modified app, a changed device clock and a rooted phone are all incapable of altering an amount, because there is nothing on the device to alter. This principle is in force today.

No proof-of-work, and no pretence of it

There is no puzzle, no hash race, and no computation on the device. The word "mining" is at best a loose metaphor for what happens here, and this document does not use it as a description. The app has a button called Mine; what it does is start an hour, and the app says beside it that no device computation occurs.

Integers, never floating point

All accounting is in whole base units, with nine decimal places. No amount is ever represented as a floating-point number at any point in the system, including in the application programming interface (API), because the largest amounts the system handles cannot be represented exactly that way. Division always rounds down, so distribution can never exceed what exists.

Absence is not zero

An amount that has not yet been decided is shown as pending, never as zero, and never as an estimate presented as a balance. A figure the system cannot currently establish is reported as unavailable rather than substituted with a plausible one.

3. Supply and allocation (design)

In the design, total supply is fixed at ten billion units at genesis, with nine decimal places, on Solana. There is no inflation, no discretionary minting and no mechanism to create additional supply after genesis. No token has been minted. The table below is the designed allocation, not a description of anything that exists.

Half of the designed supply, five billion units, is the participation reserve. It is the only allocation this document describes, and it is the only one distributed through the mechanism below. The other allocations are subject to separate vesting schedules and are not covered here. No sale of any allocation has occurred or is planned on the basis of this document.

4. The emission schedule

The reserve is released over sixty-one periods of ninety days each: fifteen years and eleven days in total. The schedule terminates absolutely. There is no sixty-second period and no emission after it. The start time of the schedule has not been set; today's points are settled against the schedule's first period under the trial policy described in Part A.

A permanent base with a halving bonus

Each period's allocation is the sum of two parts. A permanent base is the same in every period from the first to the last. A bonus starts high and halves roughly every four years, rewarding early participation.

This shape is deliberate. A schedule that only halves trails towards nothing, so the reward for taking part in year fourteen becomes negligible long before the reserve is exhausted. Splitting the release into a permanent floor and a decaying bonus keeps late participation meaningful while still front-loading a substantial share.

The sum over all sixty-one periods is exactly five billion units. Not approximately: the final period carries a four base unit reconciliation so the total is exact to the smallest representable amount, with nothing left over and nothing overspent.

Each period is divided evenly into 2,160 hours, and each hour receives an equal allocation. The 90-day period is exactly 7,776,000 seconds anchored to a published start time; it is not a calendar quarter.

5. Settlement

When an hour closes, its allocation plus anything carried forward is divided among the participants of that hour in proportion to their weight, subject to the per-session cap. Nothing is reserved in advance and no session is refused for lack of capacity. This is the part of the design that runs today, for Senkai points.

Distribution and carry-forward always sum exactly to the pool, so nothing is created and nothing is stranded. An hour with no participants carries its entire pool forward. The mechanism page explains this in detail with worked figures.

Weight begins at 1.00 and rises by 0.05 for each qualified referral to a maximum of 1.25 at five. It is fixed when a session opens and cannot be changed afterwards.

6. Claiming (design)

Nothing in this section exists today. There is no token, no wallet in the app, no batch and no claim. Senkai points are not claimable, transferable or convertible. This section describes how the design would work if the on-chain part were ever built and cleared.

In the design, rewards accrue off-chain and are committed on-chain in batches. Activity is partitioned into consecutive fifteen-day batches, six of which exactly cover each ninety-day period, so a batch never straddles a boundary.

Points mined before the launch (decided 2026-11-02). Everything earned in the app before the mainnet launches is owed to people on the day it launches. It is not released all at once. It is released through these same fifteen-day batches, oldest batch first, each one after its public review period and the 48-hour timelock, so that what can move in the first month after the launch stays close to what the design intended for any month, and the earliest participants are paid first. At the planned pace the backlog clears in months, not years; the exact pace depends on the launch date, because the schedule's clock is already running. This was chosen by the founder from a published simulation of the supply (the alternatives were all at once, which puts several times the intended amount in motion in the first month, or a further linear unlock of a year on top of the batches, which makes the last of each person's points wait a year). No date, no price and no amount is promised by this.

After each batch closes, a reconciled dataset is published for review and committed as a Merkle root (a single cryptographic summary of the whole dataset, against which any one entry can be proved). The first root is committed in a locked state: its amounts are funded but nothing can be claimed. Claims open once, globally, for everybody at the same time, after a public notice period and a multi-signature authorisation. There is no individual early access and no discretionary unlock.

What the designed claim process will not do

• It never holds your keys. Claims go to a wallet you already control.
• It cannot recover a seed phrase, because it never had one.
• It cannot reassign a committed entitlement to a different wallet.
• It sets no minimum you must reach before you may claim.
• It has no expiry. A committed entitlement is never reclaimed or reissued.

Before an entitlement is committed, the account and the destination wallet must satisfy the applicable jurisdiction, sanctions, wallet-risk, identity and age requirements, and a wallet change takes effect only after a waiting period. These checks happen before a root is built; the on-chain program itself only verifies the proof and the signature.

7. Fraud, review and appeal

Rewards are funded by advertisers who are paying for genuine human attention. Automated or duplicated participation takes from that pool without providing what was paid for, so it is controlled tightly. Evidence that an advertisement was watched must be confirmed independently by the advertising network; a claim from the app alone is never sufficient. This is in force today.

Automated systems may immediately limit activity, require additional verification, or hold new value while a case is examined. But a permanent exclusion or a final rejection of a reward is not left to an automated decision: it carries notice, a genuine human review, and a route to appeal. Specific fraud thresholds are not published, because publishing them would tell the people evading them exactly where the line sits.

8. Transparency

Today, what is published is the rule, the schedule, the worked example and the test vectors the server's code is checked against, together with the app file's checksum and certificate fingerprint. The transparency page says what is published and what is not yet.

In the design, every claim dataset is published with a content hash before it is committed, and committed roots are on-chain and independently verifiable. Published figures carry their provenance and the time they were accurate, so a number can always be traced to the record it came from.

Circulating supply is to be reported with a stated methodology rather than as a bare figure. The intent is that an outside party can reconstruct the distribution from published artifacts without trusting this project's arithmetic, including the settlement arithmetic, which is published as test vectors that any independent implementation can check itself against.

9. Privacy

Today the app collects what Part A lists and nothing more: the sign-up details, a hardware attestation, and the advertisement events through Google AdMob. Deletion is by request to the address in Part A. A privacy policy and terms of service are pending.

The design's wider intent is that the service collects what it needs to verify participation and prevent fraud, and holds it for a stated period rather than indefinitely. Raw device, network and advertising evidence is subject to a shorter ceiling than the pseudonymous signals used for fraud detection. Financial and identity records, if they ever exist, follow their own statutory schedules.

Where the service is available to people aged sixteen and over, stricter defaults apply to them: minimised profiling and location use, plainer explanations, and no activation at all where a suitable advertising path for that audience does not exist.

This website itself sets no cookies, runs no analytics, embeds nothing from a third party, and makes no request to any other server.

10. Risks and limitations

You may receive nothing, and what you receive may be worth nothing. This section is not boilerplate. Read it.

No value is promised

Senkai points have no cash value today. They are intended to become Senkai tokens when the mainnet launches, and the launch may be late, may be different from this design, or may not happen. Nothing in the design creates, supports or guarantees a price for anything. There may never be a token, a market, a listing, an exchange, a buyer or a way to convert what you receive into anything else. A fixed supply is not scarcity in any economically meaningful sense, and it does not imply value.

The amount is not knowable in advance

Your share depends on how many other people take part in the same hour, which nobody knows beforehand, including this project. Past amounts do not indicate future ones, and the per-session cap and the emission schedule both decline substantially over time.

The design may never be completed

The on-chain part of the system is unfinished and paused. It depends on legal clearance, security audit, funding and decisions that have not been taken, none of which is secured. Any of these can stop that part of the project permanently. No date exists for any of it.

Advertising revenue may not support the design

The economics depend on rewarded advertising continuing to be available, permitted and worth enough to fund operations. Advertising markets, network policies and store policies all change, and any of them can make the service unviable in a country or entirely.

Availability differs by country

Some features are unavailable in some places and will stay that way until the relevant regulatory work is complete. In particular, claims, transfers and conversions do not exist today and, in the design, are switched off by default in jurisdictions where they have not been cleared, regardless of whether the app itself is installable there.

Ordinary technical and custody risk

In the design, blockchain transactions cannot be reversed. If you lose access to a wallet you claim into, nobody, including this project, can restore it. Smart contract defects, network outages and provider failures are all possible. Audits reduce risk; they do not eliminate it.

11. Status

As of 2026-11-02:

• The Android app, Senkai, is published as a signed file from senkainetwork.com, by Senkai Network Private Limited, a company incorporated in Pakistan.
• The app gives Senkai points, which have no cash value today and are to become the token when the mainnet launches. The hour and the division rule in sections 2 and 5 run today, under a trial policy, for that in-app asset.
• No token has been minted. No ticker is in use. No sale of any kind has occurred or is planned on the basis of this document. There is no price and no market.
• The emission start time for the on-chain design has not been set, and the on-chain work is paused.
• There is no Play Store listing and no iPhone app.
• No counsel has reviewed this document, the app or this website. The trademark, domain, app-store and name reviews the project's own records require have not been done; the founder accepted going public without them on 2026-10-31, and that acceptance is on record.
• A privacy policy and terms of service are pending.

Figures in this document come from the project's own specification and from the code that implements it. Where they describe future behaviour, they describe intended behaviour that remains subject to review, audit, legal clearance and change.